Secure Shell (SSH) is a protocol primarily for encrypted shell connections. This tag is also used for questions about sshd and openssh, the two standard applications for using SSH.

learn more… | top users | synonyms (2)

1
vote
1answer
15 views
+50

Galera Rsync SST Secured via SSL/SSH

Is it possible to secure Galera Cluster SST via rsync with SSL/SSH? This page suggests it is not, specifically the following quote: Unlike rsync, xtrabackup includes support for SSL encryption ...
1
vote
0answers
14 views

Allow ssh when g+w on user's home directory

Is it possible to allow one user to connect via SSH when that user's home directory is g+w? As I understand it, I can allow this if I set StrictModes yes in /etc/ssh/sshd_config, but that would mean ...
9
votes
3answers
5k views

Trying to get SSH with public key (no password) + google authenticator working on Ubuntu 14.04.1

I'm using Ubuntu 14.04.1 (with OpenSSH 6.6 and libpam-google-authenticator 20130529-2). I'm trying to set up SSH logins where the public key authenticates (without a password) and a user is prompted ...
0
votes
0answers
9 views

Dependencies in openssh-server package in LXC container in Ubuntu 14.04 LTS

Hi I've been fiddling with Lxc containers in Linux and find it an invaluable resource for testing and dev purposes. Here's my problem. I have a just-installed container and when I try to install ...
1
vote
3answers
3k views

ssh hangs on “Last login” line

This happened for the first time three days ago - I ssh to the server, authenticate using a password, get the welcome message but it remains hanging on the "Last login:..." line. The command line ...
-1
votes
0answers
15 views

How to write access command with credentials?

We had a third party company setup servers and built services for us years ago. But the relationship is strained now and basically they won't reply any email to us. We could find some legal help but ...
4
votes
1answer
5k views

SSH - cannot start sftp-server when trying to force internal sftp

The subsystem "sftp" is used for any non-sftp user. When a user has /bin/false as default shell, he is still able to login using sftp (and he is not supposed to). I have the following lines in my ...
2
votes
1answer
33 views

How to disable sftp access to user with ssh already disabled (user shell = /bin/false, but connection still works with sftp)

In sshd_config, by default, login is allowed for all groups and users. The allow/deny directives are processed in the following order: DenyUsers, AllowUsers, DenyGroups, and finally AllowGroups. ...
4
votes
2answers
1k views

How to set up two-factor authentication with OTP on FreeBSD?

I have a FreeBSD server that I like to be able to get to from anywhere. Normally I use SSH publickey to log in, or if I don't have my SSH private key available then I might use regular password over ...
0
votes
1answer
3k views

Cannot SSH to Azure Linux VM from terminal

ssh azureuser@xxx.cloudapp.net : 22 when I connect and enter the password I created, then it just goes back to the local prompt and does not actually show the remote prompt. I'm thinking I need to ...
-1
votes
0answers
16 views

openssh-server wont install on linux server, any ideas? [duplicate]

So, my server recently got broken into, and to stop any possible sshd backdoors, I attempted to reinstall openssh-server... this broke ssh. I'm still connected, but cannot reconnect from another ...
1
vote
1answer
17 views

Scalable remote access gateway for 20K+ servers

Consider a worldwide distribution of thousands of embedded servers, and clusters of servers behind firewalls that sysadmin wants to access remotely. With a focus on a remote access for login and ...
0
votes
2answers
2k views

Chef: Knife ssh connection error

I try to run a command on all my nodes but get the following error. The chef docs say it should work like this. me$ sudo knife ssh "name:*" "uptime" -x myuser WARNING: Failed to connect to -- ...
1
vote
2answers
3k views

Can I regenerate the rsa key for SSH access to a Cisco router? Or should I completely erase the SSH config?

I have a production 2691 that I administer via telnet. I'd like to change that to SSH. Looking at the config, it looks like there have been keys generated in the past. I think the history here is ...
-2
votes
0answers
21 views

While loop failing without completing the action completely - must be stdin issue

Seeking experts help to fix stdin issue permanently, I was able to query using while loop with manually directing stdin (please see example below). Are there any method to specify in .profile or ...
7
votes
4answers
66k views

SSH: Permission denied (publickey,gssapi-with-mic,password)

==================================================================== UPDATE: It turned out the configuration of sshd on host2 wont allow password login. Thanks to people answered this. ...
0
votes
1answer
417 views

Can't ssh into Centos vm in Openstack

In Openstack, I can spawn ubuntu and fedora images and ssh into them. But when I am trying the same with Centos image (6.5 or 7), then my key is refused (or even ignored) and I am proposed to use ...
-2
votes
0answers
32 views

Using Screens with a PHP Script [migrated]

I found an external developer to make me a PHP script to 'snipe' Mineraft usernames. In order for it to operate, I have to start the script from the command line using this: php -f sniper.php > ...
3
votes
2answers
402 views

How to SSH to a remote server using a private key on Linux?

I have been trying to connect to a remote server using my private key file from the terminal, but it doesn't seem to work. I don't understand why. Here is how I do it: $ ssh -i private.ppk ...
1
vote
1answer
34 views

OpenSSH use (public key or password) + google authenticator

I want to allow these two authentication types: public key + google authenticator OR password + google authenticator. I have the following in my sshd_config: AuthenticationMethods ...
1
vote
1answer
1k views

How to use an SSH Gateway with Chef's Knife Bootstrap

I'm just getting started with Chef and have a few nodes in a private network that I need to first ssh into a gateway node to gain access to. For the moment i'm using purely password based ...
0
votes
0answers
18 views

One SSH client can only connect through port 22, not other ports, on any remote server

I have a client server under Debian Wheezy. It can not connect to a server that has a special opened port for ssh (let us say 2222). All other clients I use (from other sites) can connect to my ...
14
votes
3answers
8k views

OpenSSH: Difference between internal-sftp and sftp-server

Why are there two ways to setup SFTP with OpenSSH and when to use which? Is there any difference between them? I mean the first one is using a lib from OpenSSH and the second one says "use the ...
0
votes
1answer
8 views

apt-get maddeningly doesn't work with tsocks proxy set up with ssh

I have a machine that cannot access the internet, yet can connect to a machine that does. I don't want to use a proxy server, I've been told that I can just use ssh. So I've proceeded simply by ssh ...
20
votes
4answers
7k views

How to handle SSH port changes with Ansible?

I'm trying to use Ansible for automating the setup process of new server instances. One of the setup tasks changes the default SSH port, therefore requiring me to update the hosts list. Is it ...
11
votes
6answers
9k views

Trying to SSH in to remote computer but still asking for password

Trying to SSH in to remote computer but still asking for password. I have a number of computers running SElinux and only one of them is giving me a hard time using ssh without the password. I did ...
-1
votes
0answers
16 views

need to assign mysql root user to database with full permission [on hold]

I have a Centos 6 box with MySQL 5.6 There's a database control panel script I bought that requires full root access to MySQL. I can't figure out via CLI how to greant the mysql root user the full ...
0
votes
0answers
18 views

Host verification with cross-realm kerberos auth and ssh

I have configured kerberos to cross-realm trust(MIT+AD) and here is what happens: When I do: kinit foo@MIT-REALM.COM ssh foo@krbservice Everything works fine. When I do: kinit bar@AD-REALM.COM ...
4
votes
1answer
1k views

Git clone from Windows to Windows cannot find the repository

git clone gituser@<server>:myRepo.git doesn't work, fails with the error message: fatal: ''myRepo.git'' does not appear to be a git repository Background: We have a Windows 7 machine set up ...
5
votes
6answers
2k views

Email notification about each SSH connection to Linux server

I would like to be notified about each SSH connection to the Linux (Debian) server. Already saw some methods, which proposed to add mail command into own .bashrc, but this approach seems not to cover ...
-1
votes
0answers
6 views

Passwordless login for AFS

Is there a way to have passwordless login for a system running AFS? I tried a ssh key pair, and although I logged in with no issue, I did not get an AFS token. Every 24 hours, I need a new AFS token, ...
-2
votes
0answers
13 views

dadcomputer.home appears as dadcomputer.lan when logging in to another computer [closed]

I changed ADSL router recently (from BT home hub 4 to technicolour tg582n) and now dadcomputer.home (ubuntu) appears as dadcomputer.lan when logging into my freeciv server, or SSHing into another ...
1
vote
1answer
21 views

Authenticate Users based on AD group membership. Ubuntu 14.04 , Cant find help anywhere

Been Googling for two days now. I am not new to Linux, but am new to AD and using it in Linux. So. I have an AD system ( not run be me ) and its joined happily. I followed this procedure: ...
12
votes
6answers
6k views

Forward local port or socket file to remote socket file

Quick question - I run two linux boxes, one my own desktop and the other my VPS. For security reasons on the VPS end I opted for socket connections to MySQL (/var/run/mysqld/mysql.sock). I know I can ...
92
votes
7answers
103k views

Can I automatically add a new host to known_hosts?

Here's my situation: I'm setting up a test harness that will, from a central client, launch a number of virtual machine instances and then execute commands on them via ssh. The virtual machines will ...
8
votes
2answers
2k views

SSH through a SOCKS Proxy? (client = OpenSSH OS X)

I'm not sure if this question is best suited here on ServerFault or over on SuperUser. Thinking about it logically I think this is a sysadmin question, so I'm putting it here, and if the mods think it ...
-1
votes
1answer
22 views

Can scp maintain original file structure on remote server?

Supposing we have the following files to copy to a remote server: /dir/test.php /dir/inc/inc.php I now want to copy both files to the remote server as follows: cd /dir/ scp test.php inc/inc.php ...
2
votes
2answers
10k views

How do you configure X11 forwarding over SSH on AIX?

Here is what I've tried. I've edited /etc/ssh/sshd_config on the remote AIX system X11Forwarding yes X11DisplayOffset 10 X11UseLocalhost yes as well as set $DISPLAY DISPLAY=localhost:10.0 export ...
0
votes
1answer
22 views

SSH remote execute command with special chars

Im trying to run this from my shell: I have a bunch of machines, so i have this in my .bash_profile function sssh() { ssh -i ~/.ssh/supersecret.pem $@ } This is the command: export ...
0
votes
1answer
36 views

how to run multiple commands (nested control statements) on remote machines with sudo?

My bash code is: 1 #!/bash/sh 2 set -e 3 USER="admin" 4 HOST="1.2.3.4" 5 PASSWORD="$(cat password.txt)" 6 7 sshpass -p"$PASSWORD" ssh -t $USER@$HOST "/usr/bin/sudo bash -c 'sudo ls ...
1
vote
2answers
41 views

Central control for SSH access to AWS instances

What are some approaches or best practices for managing SSH access by many devops to many AWS instances? I'd like to have the ability to e.g. add or remove access for a user to multiple instances ...
0
votes
1answer
44 views

Dumping command output from SSH session to procurve

I am trying to get information from the command "show mac-address" out of a collection of 12 procurve switches in 2 different locations all connected via fiber PTP. I want to import this into SQL for ...
1
vote
1answer
27 views

Connection to postgresql hangs over SSH tunnel on OSX

Trying to connect to a remote PG server on OSX but it keeps timing out. First, I set up the tunnel: ssh -L 5433:serverip:5432 user@serverip Then in a separate terminal I attempt to connect to PG: ...
10
votes
2answers
9k views

Authentication Order with SSH

When I login via ssh with -v I see that ssh is authenticating the following way debug1: Authentications that can continue: publickey,gssapi-with-mic,password,hostbased I would like to change the ...
25
votes
8answers
18k views

Is there an equivalent to ssh-copy-id for Windows?

Is there any equivalent or port of ssh-copy-id available for Windows? That is, is there an easy way to transfer SSH keys from a local machine to a remote server under Windows? In case it helps, I'm ...
0
votes
2answers
1k views

Terminal output being cut off

I'm using ZSH as my shell and running a Debian 7 installation on a Linode box. When I ssh into this box and run any command where the output is larger than the window, the output that extends beyond ...
2
votes
3answers
3k views

Cannot connect to Openstack Instance via horizon, but SSH works?

I've got an OpenStack deployment running inside a VM for testing purposes. My setup is as follows: Host Ubuntu x64 with Virtualbox -> Guest Ubuntu x64 with OpenStack -> Ubuntu X64 Server Test ...
0
votes
0answers
32 views

Can't SSH to remote fedora server after reboot [closed]

I have a dedicated server on Fedora 23 I rebooted 3 weeks ago and since that time, I can't login, I'm refused on the server. I can have a rescue mode and then I try to "chroot" drives I mounted. I ...
0
votes
1answer
1k views

SSH tunnel for socks5 proxy is slow with concurrent load

I ssh to a remote AWS server using Ubuntu. I use ssh's port forwarding capabilities to do this. I have tried forwarding a dynamic port (ssh -D) or a single port (ssh -L with dante running as a remote ...
2
votes
1answer
1k views

Improper output in SSH session on OSX using FreeSSHd on Windows with cygwin bash/sh shell

I am testing out running an SSH server on a local Windows VM. I have installed FreeSSHd and set the command shell to "c:\cygwin\bin\sh --login -i" (bash as well) with "Use new console engine" ...